Sustainsys / Saml2

Saml2 Authentication services for ASP.NET

Other

961 stars 603 forks source link

Problem inResponseTo ID #1428

Closed caligt closed 9 months ago

caligt commented 10 months ago

Mismatched InResponseTo ID in SAML Response with Red Hat SP and MyWorkPal IDP

Issue Description

Using library version 2.9.2 with Red Hat as SP and MyWorkPal as IDP, encountering mismatched session IDs in SAML response.

Initial Authentication Attempt:
- Session correctly established in Red Hat.
- Mismatch between ID generated by the application and the IDP's InResponseTo ID.
Error Encountered:
Error: InResponseTo Id "ID_714ab1fb-8af5-417a-ad85-2427434eaf6e" in received response does not match Id "id6c24a58da6c546d4ac86eb21a8007e41" of the sent request

Occurs at route: https://localhost:44370/Saml2/Acs.

Subsequent Flows:
After initial attempt, as session remains active in Red Hat, subsequent flows work fine.

Query

Seems like an issue with library maintaining ID consistency.
Any known configuration or workaround within the library to address this?

Thank you for your assistance.

AndersAbel commented 10 months ago

Can you please capture the Saml AuthnRequest sent and the response received to see if the Ids are correct in the messages?

To capture the Saml messages the easiest is to use the Saml Dev Tools extensions for Google Chrome.